deny
A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Sandbox credential masking now documents that it falls back to deny on macOS and Windows.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.221.
In the changelogs
19Releases whose published page names deny.
-
v2.1.305
Cloud sessions can allow or block MCP servers by host
In Anthropic cloud sessions, Claude Code can check each MCP server's host against an allow or deny list sent by the server
found in this entry's text
-
v2.1.281
Session permission rules can now carry added directories
Session permission rules can now hold an optional addDirs list next to allow and deny
found in this entry's text
-
v2.1.269
New plugin hook events: session.attach, session.detach, tool.check
Plugins can now hook into session attach/detach and tool permission checks
found in this entry's text
-
v2.1.268
Sandbox schema additions: MITM proxy domain routing and env-var credential masking with JWT decode
Sandbox config gains schemas for routing traffic through a MITM proxy and masking credentials in environment variables, including JWT handling
found in this entry's text
-
v2.1.248
MCP server allow and deny lists get settings keys
You can allow or block specific MCP servers with allowedMcpServers and deniedMcpServers settings.
found in this entry's text
-
v2.1.248
AWS proxy request-signing policies are documented as fail-closed
Three settings control AWS proxy request signing, all defaulting to deny with a 403.
named in this entry, found in this entry's text
-
v2.1.224
Sandbox credential masking gains JWT handling, per-claim masking and AWS SigV4 re-signing
Sandbox credential masking can fake JWTs, mask single claims, and re-sign AWS requests after swapping keys.
found in this entry's text
-
v2.1.221
Sandbox credential masking documents its platform limits
Sandbox credential masking now documents that it falls back to deny on macOS and Windows.
named in this entry, found in this entry's text
-
v2.1.221
sandbox.credentials.files gains a
maskmode with regex extractionYou can mask secrets in credential files so sandboxed commands see placeholders while real values are swapped in on egress.
found in this entry's text
-
v2.1.208
Credential masking: extract patterns with onExtractNoMatch control
found in this entry's text
-
v2.1.199
Credential Masking: Regex Extract Patterns
found in this entry's text
-
v2.1.118
Auto Mode Classifier $defaults Inheritance
found in this entry's text
-
v2.1.78
Auto Mode Classifier:
denyRenamed tosoft_denyfound in this entry's text
-
v2.1.3
Unreachable Permission Rules Detection
found in this entry's text
-
v2.0.33
Enhanced Security: Path Resolution Bypass Protection
found in this entry's text
-
v2.0.33
Enhanced Security: Path Resolution Bypass Protection
found in this entry's text
-
v0.2.90
Tool Permission System
found in this entry's text
-
v0.2.69
Enhanced Permission System
found in this entry's text
-
v0.2.69
New Configuration Schema
found in this entry's text
First cited
0No release's published evidence quotes this name. The ledger indexes the Evidence lines of every changelog on this site, so this says nobody here has ever quoted it; it says nothing about how old the name is.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.